Open Real Estate 1.15.1 XSS / SQL Injection / Weak Hashing

Introduction: Open Real Estate is an open source CMS for managing estate agent websites. It is written in PHP and uses the YII CMF. It supports multiple languages. It is supported by MonoRay.net The product has a number of commercial support offerings available and an internal market for...

Threat Outbreak Alert RuleID20969: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43443 First Published: 2016 February 5 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20969 may contain the following files: Name |...

Threat Outbreak Alert RuleID20965: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43441 First Published: 2016 February 5 19:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20965 may contain the following files: Name |...

Updated java-1.8.0-openjdk/copy-jdk-configs/lua-lunit/lua-posix packages fix security vulnerability

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...

Threat Outbreak Alert RuleID20956: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43429 First Published: 2016 February 5 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20956 may contain the following files: Name |...

Threat Outbreak Alert RuleID20950: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43424 First Published: 2016 February 5 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20950 may contain the following files: Name |...

AIX OpenSSL Advisory : openssl_advisory16.asc (SLOTH)

The remote AIX host has a version of OpenSSL installed that is affected by a collision-based forgery vulnerability, known as SLOTH Security Losses from Obsolete and Truncated Transcript Hashes, in the TLS protocol due to accepting RSA-MD5 signatures in the server signature within the TLS 1.2...

Threat Outbreak Alert RuleID20931: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43418 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20931 may contain the following files: Name |...

Threat Outbreak Alert RuleID20930: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43417 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20930 may contain the following files: Name |...

Threat Outbreak Alert RuleID20918: Email Messages Distributing Malicious Software on February 4, 2016

Medium Alert ID: 43412 First Published: 2016 February 4 22:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20918 may contain the following files: Name |...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-38.6.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

DLA-410-1 openjdk-6 - security update

Bulletin has no description...

Threat Outbreak Alert RuleID20892: Email Messages Distributing Malicious Software on February 3, 2016

Medium Alert ID: 43396 First Published: 2016 February 3 20:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20892 may contain the following files: Name |...

RHEL 5 : java-1.7.0-ibm (RHSA-2016:0100) (SLOTH)

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

openSUSE Security Update : seamonkey (openSUSE-2016-126) (SLOTH)

SeaMonkey was updated to 2.40 boo959277 to fix security issues and bugs. The following vulnerabilities were fixed : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature - CVE-2015-7201/CVE-2015-7202: Miscellaneous memory safety hazards - CVE-2015-7204: Cra...

RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2016:0099)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0099 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes...

Threat Outbreak Alert RuleID20866: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43380 First Published: 2016 February 2 20:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20866 may contain the following files: Name |...

Threat Outbreak Alert RuleID20861: Email Messages Distributing Malicious Software on February 3, 2016

Medium Alert ID: 43377 First Published: 2016 February 2 20:23 GMT Last Updated: 2016 February 4 13:21 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20861...

Threat Outbreak Alert RuleID20857: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43368 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20857 may contain the following files: Name |...

Threat Outbreak Alert RuleID20849: Email Messages Distributing Malicious Software on February 2, 2016

Medium Alert ID: 43362 First Published: 2016 February 2 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20849 may contain the following files: Name |...